Skip to content
← All work

Apps & web · 2026 · Product & engineering

Lapa Concierge

Guest concierge and rentals app for Nosara, Costa Rica, run by staff in Odoo

Staging, website and app live one week after the start; an external security review found zero critical or high findings.

Screenshots

  • Lapa Concierge website

App: home, with live weather and the guest's bookings
App: renting an ATV (hourly to weekly pricing, date picker)
App: services included with the stay
App: profile, documents and notifications
App: a category of services
Website on a phone

What it is

Guests book vehicles, transfers and tours from an app; staff run it in Odoo 19. Five backend modules (four for Lapa plus the TiloPay provider) expose a mobile API with scoped keys, Google and Apple sign-in, bookings locked against double-booking, and card payments re-verified on the server. Releases go through CI with a rehearsal deploy and automatic rollback; backups are encrypted and the restore is tested.

Highlights

  • 101 backend tests; a 28-agent, 203-check security review found zero critical or high findings
  • Double-booking race fixed with a row lock and retry, proven by parallel tests
  • Encrypted backups shipped off-site, with a tested restore